Skip to content
Open-Source Registry

cargo / nora-registry / 1.3.5

nora-registry 1.3.5

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection3 vulnerabilities
processes
662
operations
102K
packages
465
compiler runs
763
connections
3
job time
10m 51s
capture
1.4 MB
records
186K
bytes / record
7.6

Build behaviourundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

run fa99b009-881d-4129-a9c1-0cffc0f61588 · built 2026-10-13 · complete

Artifact

file · retained · product · graph v2
2

Checks

12 of 14 clear Network activity Known vulnerabilities
Build behavior▲✓✓✓✓✓✓✓
Supply chain▲✓✓✓✓
Pipeline✓

Detections

1
  • Build code opened a network connection
    utoipa-swagger-ui 9.0.2 › github.com:443, codeload.github.com:443
    high

Detection

highwitnessed

Build code opened a network connection

Unexpected network connection

Subject
utoipa-swagger-ui 9.0.2
Destination
github.com:443, codeload.github.com:443
Reaches
Jobs
build-test
Rule
egress · nora

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by build-script-build

    subject github.com:443

    by /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-89734f5efe25cc05/build-script-build

  2. Connection outside the process’s allowed destinationscause

    connection to codeload.github.com:443, opened by build-script-build

    subject codeload.github.com:443

    by /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-89734f5efe25cc05/build-script-build

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-89734f5efe25cc05/build-script-build

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-89734f5efe25cc05/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2453
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2453
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-89734f5efe25cc05/build-script-build8342

Remediation

Review the process and its owning build step. Remove unnecessary requests; move required downloads to a declared dependency-fetch step.

Network

3 peers
  • codeload.github.com:443 build code of utoipa-swagger-ui · build-script-build (nora) · GitHub, Inc. · 20 files · went into an output undeclared
  • github.com:443 build code of utoipa-swagger-ui · build-script-build (nora) · GitHub, Inc. · 20 files · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (nora) via crates.io · 25,140 files · went into an output ecosystem
Dependencies495Build behaviour
ring0.17.14build scriptprebuilt objects
utoipa-swagger-ui9.0.2build scriptnetworkcodeload.github.com, github.com
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
wit-bindgen0.57.1build script, not runprebuilt objects
alloca0.4.0build script
async-trait0.1.92proc macro
bitfields-impl1.0.3proc macro
clap_derive4.6.4proc macro
crc240.1.6build script
crc32fast1.5.1build script
crossbeam-deque0.8.7build script
crossbeam-epoch0.9.20build script
crossbeam-utils0.8.22build script
crunchy0.2.4build script, not run
curve25519-dalek4.1.3build script
curve25519-dalek-derive0.1.1proc macro
darling_macro0.20.11proc macro
derive_arbitrary1.4.2proc macro
derive_builder_macro0.20.2proc macro
derive_more-impl2.1.1proc macro
displaydoc0.2.7proc macro
enum-display-derive0.1.1proc macro
enum-primitive-derive0.3.0proc macro
futures-macro0.3.34proc macro
generic-array0.14.7build script
getrandom0.3.4build script
getrandom0.4.3build script
httparse1.10.1build script
iana-time-zone-haiku0.1.2build script, not run
icu_normalizer_data2.3.0build script
icu_properties_data2.3.0build script
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
mime_guess2.0.5build script
multer3.1.0build script
num-bigint-dig0.8.6build script
num-derive0.4.2proc macro
num-traits0.2.19build script
num_enum_derive0.7.6proc macro
parking_lot_core0.9.12build script
pin-project-internal1.1.13proc macro
portable-atomic1.15.0build script
proc-macro21.0.107build script
prometheus0.14.0build script
protobuf3.7.2build script
quinn0.11.11build script, not run
quinn-udp0.5.15build script, not run
quote1.0.47build script
radium0.7.0build script
rayon-core1.13.0build script
rust-embed-impl8.12.0proc macro
rustix1.1.4build script
rustls0.23.45build script
rustversion1.0.23build scriptproc macro
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.151build script
snafu-derive0.9.2proc macro
syn1.0.109build script
thiserror1.0.69build script
thiserror2.0.20build script
thiserror-impl1.0.69proc macro
thiserror-impl2.0.20proc macro
time-macros0.2.32proc macro
tokio-macros2.7.2proc macro
tracing-attributes0.1.31proc macro
utoipa-gen5.5.0proc macro
valuable0.1.1build script, not run
wasm-bindgen0.2.127build script, not run
wasm-bindgen-macro0.2.127proc macro
wasm-bindgen-shared0.2.127build script, not run
winapi0.3.9build script, not run
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
yoke-derive0.8.2proc macro
zerocopy0.8.56build script
zerocopy-derive0.8.56proc macro
zerofrom-derive0.1.7proc macro
zeroize_derive1.5.0proc macro
zerovec-derive0.11.6proc macro
zmij1.0.23build script
NuGet.Versioning6.14.0
aead0.5.2
aes0.8.4
aes-gcm0.10.3
aes-kw0.2.1
aho-corasick1.1.5
android_system_properties0.1.6
anes0.1.6
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anstyle-wincon3.0.11
ar0.9.0
arbitrary1.4.2
arc-swap1.9.2
argon20.5.3
assert-json-diff2.0.2
async-compression0.4.43
atomic-waker1.1.2
autocfg1.5.1
axum0.8.9
axum-core0.5.6
base16ct0.2.0
base640.22.1
base640.23.1
base64ct1.8.3
bcrypt0.19.3
bit-set0.8.0
bit-vec0.8.0
bitfields1.0.3
bitflags2.13.1
bitvec1.1.1
blake20.10.6
block-buffer0.10.4
block-buffer0.12.1
block-padding0.3.3
blowfish0.10.0
blowfish0.9.1
buffer-redux1.1.0
bumpalo3.20.3
byteorder1.5.0
bytes1.12.1
camellia0.1.0
cast0.3.0
cast50.11.1
cc1.4.4
cfb-mode0.8.2
cfg-if1.0.4
cfg_aliases0.2.2
chacha200.10.2
chrono0.4.45
ciborium0.2.2
ciborium-io0.2.2
ciborium-ll0.2.2
cipher0.4.4
cipher0.5.2
clap4.6.6
clap_builder4.6.6
clap_lex1.1.0
cmac0.7.2
colorchoice1.0.5
compression-codecs0.4.38
compression-core0.4.32
console0.16.4
const-oid0.10.2
const-oid0.9.6
convert_case0.10.0
core-foundation0.10.1
core-foundation-sys0.8.7
cpufeatures0.2.17
cpufeatures0.3.1
crc3.4.0
crc-catalog2.5.0
criterion0.8.2
criterion-plot0.8.2
crossbeam-channel0.5.16
crypto-bigint0.5.5
crypto-common0.1.7
crypto-common0.2.2
ctr0.9.2
cx4480.1.1
darling0.20.11
darling_core0.20.11
dashmap6.2.1
dbl0.3.2
deadpool0.12.3
deadpool-runtime0.1.4
der0.7.10
deranged0.5.8
derive_builder0.20.2
derive_builder_core0.20.2
derive_more2.1.1
des0.8.1
digest0.10.7
digest0.11.3
dsa0.6.3
eax0.5.0
ecdsa0.16.9
ed255192.2.3
ed25519-dalek2.2.0
either1.18.0
elliptic-curve0.13.8
encode_unicode1.0.0
encoding_rs0.8.35
equivalent1.0.2
errno0.3.14
fastrand2.5.0
ff0.13.1
fiat-crypto0.2.9
filetime0.2.29
find-msvc-tools0.1.11
flate21.1.10
fnv1.0.7
form_urlencoded1.2.2
forwarded-header-value0.1.1
funty2.0.0
futures0.3.34
futures-channel0.3.34
futures-core0.3.34
futures-executor0.3.34
futures-io0.3.34
futures-sink0.3.34
futures-task0.3.34
futures-timer3.0.4
futures-util0.3.34
getrandom0.2.17
ghash0.5.1
governor0.10.4
group0.13.0
h20.4.19
half2.7.1
hashbrown0.14.5
hashbrown0.17.1
heck0.5.0
hermit-abi0.5.2
hex0.4.3
hkdf0.12.4
hmac0.12.1
http1.5.0
http-body1.1.0
http-body-util0.1.5
httpdate1.0.3
humantime2.4.0
hybrid-array0.4.14
hyper1.11.1
hyper-rustls0.27.9
hyper-timeout0.5.2
hyper-util0.1.20
iana-time-zone0.1.65
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_properties2.3.0
icu_provider2.3.1
idea0.5.1
ident_case1.0.1
idna1.1.0
idna_adapter1.2.2
indexmap2.14.1
indicatif0.18.6
inout0.1.4
inout0.2.2
insta1.48.0
ipnet2.12.1
is_terminal_polyfill1.70.2
itertools0.13.0
itertools0.14.0
itoa1.0.18
js-sys0.3.104
jsonwebtoken10.4.0
k2560.13.4
keccak0.1.6
lazy_static1.5.0
linux-raw-sys0.12.1
litemap0.8.3
lock_api0.4.14
log0.4.34
lru-slab0.1.2
lzma-rs0.3.0
matchers0.2.0
matchit0.8.4
md-50.10.6
md-50.11.0
memchr2.8.3
mime0.3.17
mio1.2.2
nom8.0.0
nonempty0.7.0
nonzero_ext0.3.0
nu-ansi-term0.50.3
num0.4.3
num-bigint0.4.8
num-complex0.4.6
num-conv0.2.2
num-integer0.1.47
num-iter0.1.46
num-rational0.4.2
num_cpus1.17.0
num_enum0.7.6
object_store0.13.2
ocb30.1.0
once_cell1.21.4
once_cell_polyfill1.70.2
oorandom11.1.5
opaque-debug0.3.1
openssl-probe0.2.1
p2560.13.2
p3840.13.1
p5210.13.3
page_size0.6.0
parking_lot0.12.5
password-hash0.5.0
pem3.0.6
pem-rfc74680.7.0
percent-encoding2.3.2
pgp0.20.0
pin-project1.1.13
pin-project-lite0.2.17
pkcs10.7.5
pkcs80.10.2
plotters0.3.7
plotters-backend0.3.7
plotters-svg0.3.7
polyval0.6.2
potential_utf0.1.6
powerfmt0.2.0
ppv-lite860.2.21
primeorder0.13.6
proptest1.11.0
protobuf-support3.7.2
quanta0.12.6
quick-error1.2.3
quick-xml0.39.4
quick-xml0.41.0
quinn-proto0.11.19
rand0.10.2
rand0.8.8
rand0.9.5
rand_chacha0.3.1
rand_chacha0.9.0
rand_core0.10.1
rand_core0.6.4
rand_core0.9.5
rand_pcg0.10.2
rand_xorshift0.4.0
raw-cpuid11.6.0
rayon1.12.0
redox_syscall0.5.18
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
replace_with0.1.8
reqwest0.12.28
rfc69790.4.0
ripemd0.1.3
rpm0.25.1
rpm-version0.5.1
rsa0.9.10
rust-embed8.12.0
rust-embed-utils8.12.0
rustc-hash2.1.3
rustc_version0.4.1
rustls-native-certs0.8.4
rustls-pki-types1.15.1
rustls-webpki0.103.15
rusty-fork0.3.1
ruzstd0.8.3
ryu1.0.23
same-file1.0.6
schannel0.1.29
scopeguard1.2.0
sec10.7.3
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.28
serde_ignored0.1.14
serde_path_to_error0.1.20
serde_spanned1.1.1
serde_urlencoded0.7.1
serdect0.2.0
sha10.10.7
sha10.11.0
sha1-checked0.10.0
sha20.10.9
sha20.11.0
sha30.10.9
sharded-slab0.1.7
shlex2.0.1
signal-hook-registry1.4.8
signature2.2.0
simd-adler320.3.10
similar2.7.0
simple_asn10.6.4
slab0.4.12
smallvec1.15.2
snafu0.9.2
socket20.6.5
spin0.9.9
spki0.7.3
stable_deref_trait1.2.1
strsim0.11.1
subtle2.6.1
symlink0.1.0
syn2.0.119
syn3.0.4
sync_wrapper1.0.2
synstructure0.13.2
tap1.0.1
tar0.4.46
tempfile3.27.0
thread_local1.1.10
time0.3.55
time-core0.1.9
tinystr0.8.4
tinytemplate1.2.1
tinyvec1.12.0
tinyvec_macros0.1.1
tokio1.53.1
tokio-rustls0.26.4
tokio-stream0.1.19
tokio-util0.7.19
toml1.1.4+spec-1.1.0
toml_datetime1.1.1+spec-1.1.0
toml_parser1.1.3+spec-1.1.0
toml_writer1.1.2+spec-1.1.0
tonic0.14.6
tower0.5.3
tower-http0.6.11
tower-layer0.3.3
tower-service0.3.3
tower_governor0.8.0
tracing0.1.44
tracing-appender0.2.5
tracing-core0.1.36
tracing-log0.2.0
tracing-serde0.2.0
tracing-subscriber0.3.23
try-lock0.2.5
twofish0.7.1
twox-hash2.1.4
typenum1.20.1
unarray0.1.4
unicase2.9.0
unicode-ident1.0.24
unicode-segmentation1.13.3
unicode-width0.2.2
unicode-xid0.2.6
unit-prefix0.5.2
universal-hash0.5.1
untrusted0.9.0
url2.5.8
utf8_iter1.0.4
utf8parse0.2.2
utoipa5.5.0
uuid1.26.0
version_check0.9.5
wait-timeout0.2.1
walkdir2.5.0
want0.3.1
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen-futures0.4.77
wasm-bindgen-macro-support0.2.127
wasm-streams0.4.2
web-sys0.3.104
web-time1.1.0
webpki-roots1.0.9
winapi-util0.1.11
windows-core0.62.2
windows-link0.2.1
windows-result0.4.1
windows-strings0.5.1
windows-targets0.52.6
winnow1.0.4
wiremock0.6.5
writeable0.6.4
wyz0.5.1
x25519-dalek2.0.1
xattr1.6.1
yoke0.8.3
zerofrom0.1.8
zeroize1.9.0
zerotrie0.2.5
zerovec0.11.8
zip3.0.0
zlib-rs0.6.7
zopfli0.8.3
libm0.2.16build script
adler22.0.1
allocator-api20.2.21
foldhash0.2.0
hashbrown0.16.1
miniz_oxide0.9.1
r-efi5.3.0
r-efi6.0.0
serdect0.3.0
spinning_top0.3.0
windows-sys0.52.0
windows-sys0.61.2
Vulnerabilities3PackageVersionFixSeverityTitleReach
RUSTSEC-2026-0194quick-xml0.39.4>=0.41.0highQuadratic run time when checking a start tag for duplicate attribute namesretained
RUSTSEC-2026-0195quick-xml0.39.4>=0.41.0highUnbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of serviceretained
CVE-2023-49092rsa0.9.10none publishedmediumMarvin Attack: potential key recovery through timing sidechannelsretained

Raw data

capture
1.4 MB
records
185,863
bytes per record
7.6

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-13 · run fa99b009-881d-4129-a9c1-0cffc0f61588

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2